This IP address has been reported a total of
33
times from
30 distinct
sources.
104.248.89.201 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
Germany
with 5
reports;
France
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
26
times;
Bad Web Bot
14
times;
Brute-Force
7
times;
Web Spam
3
times;
Port Scan
3
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning, Backup file probing
show less
Repeated requests for suspicious nonexistent URLs, for example: /backup/ (HTTP/1.1 port 443, user ag ...
show moreRepeated requests for suspicious nonexistent URLs, for example: /backup/ (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0")
show less
Web App Attack
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: WordPress scanning, Backup file probing
show less
dlcarterauthor.com:443 104.248.89.201 - - [17/Oct/2026:09:05:18 +1100] "HEAD /backup/ HTTP/1.1" 404 ...
show moredlcarterauthor.com:443 104.248.89.201 - - [17/Oct/2026:09:05:18 +1100] "HEAD /backup/ HTTP/1.1" 404 746 "http://dlcarterauthor.com/backup/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1"
...
show less
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show moreAutomated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-16 21:48 UTC.
show less
